CVE-2026-106368
- EPSS 0.18%
- Veröffentlicht 06.10.2026 18:41:39
- Zuletzt bearbeitet 06.10.2026 21:17:13
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106374
- EPSS 0.32%
- Veröffentlicht 06.10.2026 18:41:39
- Zuletzt bearbeitet 07.10.2026 13:46:26
Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106380
- EPSS 0.19%
- Veröffentlicht 06.10.2026 18:41:39
- Zuletzt bearbeitet 07.10.2026 13:45:22
UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106220
- EPSS 0.28%
- Veröffentlicht 06.10.2026 18:41:38
- Zuletzt bearbeitet 08.10.2026 01:26:49
Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106221
- EPSS 0.22%
- Veröffentlicht 06.10.2026 18:41:38
- Zuletzt bearbeitet 08.10.2026 01:26:40
Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106259
- EPSS 0.18%
- Veröffentlicht 06.10.2026 18:41:38
- Zuletzt bearbeitet 07.10.2026 21:17:12
Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106285
- EPSS 0.19%
- Veröffentlicht 06.10.2026 18:41:38
- Zuletzt bearbeitet 07.10.2026 13:43:43
UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106296
- EPSS 0.18%
- Veröffentlicht 06.10.2026 18:41:38
- Zuletzt bearbeitet 07.10.2026 21:17:12
Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106417
- EPSS 0.3%
- Veröffentlicht 06.10.2026 18:41:38
- Zuletzt bearbeitet 07.10.2026 13:10:43
Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106186
- EPSS 0.13%
- Veröffentlicht 06.10.2026 18:41:37
- Zuletzt bearbeitet 07.10.2026 04:17:46
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Low)